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(54) ACCESS CONTROL SYSTEM. ACCESS CONTROL METHOD, STORAGE MEDIUM, AND PROGRAM 
TRANSMITTING DEVICE 

(57)Abstract: / 
PROBLEM TO BE SOLVED: To make the permission of a conditional 
access possible to be evaluated in access control. 

SOLUTION: This access control system 100 is provided with a resource 
document 40 for storing policy description, a policy evaluating module 10 
for accepting an access request 1 1 0 for performing access from the 
outside part to a data file and for extracting and evaluating policy 
description related with data to be accessed of the access request 110 
from the resource document 40 and for deciding whether or not the 
access request 110 should be permitted, an executing function verifying 
module 20 forjudging whether or not the evaluation or realization of a 
condition which can not be evaluated only from the information of the 
policy evaluating module 10 is possible, when the condition is present in 
the extracted policy description, and an executing module 30 for 
executing the evaluation or realization of the condition whose evaluation 
or execution is determined as possible by the executing function 
verifying module 20. 
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(57) im^] 

-■K'J leaiarfSS^L^c U V-X h'=t y h 4 0 i: . 
1 1 0 trS ttWttT , 'J y-^ Jt^ > h 4 0 
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m^T^-txm^iOT^-txiii^x'h^y'-i^izmMn 
mmn'^mmE^mizji 'ommifzimm'^mTh 

A. 

i}<m-yw^rinx'iimmx'^tj:\.^^mzm-hmmtfz 
ai LT Kfiedf 'J i^-mm^mizTi^'-^xm^'&mf-r^ 

^««gSrffl.«T'§ I. C -h r f^lBJKJS 3 izumco 



xh \,zmm^\t(h,td-zi^^ V i^-im^wm^h 
•r^Ti'-kxmmifmiz}5\,^x. 

m%^ixfzm^^>j i^-MSM'piz^<7)ttximmx^ 

mti^n-im&-ttfzi^commi}^mT'^mxhhtpm 

mi^f¥^m&-ti>*zib(7)mstfim7^tifzmz. mm 

^ V i^-ieiS'f co^T <r>^mzM^?>mm^mzm t 

yrt ar-^tfc: b iimwLb^hT^-^xmmfim. 

mM^Wmrz r9^ x^^ov ^• 7 ^ - ^J' i: miieBXtt L 
S •/ ar#tf C i: arif® i: -T-SIB^JI 5 lcfe«c60 

<r)m\^zm-^\ ^x msdMS^\i<zm-hmm<r)m.^m.z:fk 

m-thx^yT^Wi,z%ts:ib^^b^hm^S\,z 

ma^o i^-sm'p<r>^^mm-r^xT- y yizav^x 

fFfif-ri. Z b i)^X^^j:^^midm\co^i^<rim^^^im 

i-rx. m^(^'^m^i^imtii-rx^ yTb. 

Xy-yyb. 

mii^n-ims.'ri>fziibffmmz:wm-thmmt<mM^ 
iix\.^i,bn^Lt:^'^iz. ^mmm^^x/tb-txT^^y 
yb^-ttszb^mib-ri>m^mizMm<r>Ti9-kx 

I mm 9 ] mi^ 'J '>-sd^'pcr)^i^z: ms.^hfz 

ifi<7)9m^:mn-r?>:^y'yyii. 

mm^V i^-^^(D^{:m&-r?>fzib<7)9mi)mrf 



!(3) 001-184264 (P2001-18JL8 



icJ: 0 , Hlf^«7)-r — ^' 7 r ;P4»*»'?> , miejl^ 'J i^— IS 
J'l-^*^ '^Kff.^iOT^'— ^' 7 T -< /I- T :7 -t X l> fcubcoT 



m-th^mL. m%^titzm%i^'ji^-t^^[z^cr>t. 
^x\±m&X'^^j:\^n-ti^h^m^iz, %u^t:ms, 
'ti>fzif><r)ms.i]^mi'^^i]-}£ 0 t-^nm^h^mt . 
mi^^^m^-th fzib(r}^mti^m7'^mx'h h t mm 
^ixtz^t^z. wsxm^mi^h^mt. mi^n-^ 
m&-rhtzif>ff)9mtiimr^tu-zmz. ffie^KUi^-ie 
m^<n^xcr>^mzn^hmm^3k\<zmtx . mier^ 

itmrn 1 3 ] mism^mzMz^^tix\>^^Tuy 

m^^m-hfzibiz. 

i^m^t' 3 i}^^pmrrh9mizis\.^xmx/tii ^titzmm 

l>zj:*). vf\'^<^'f—9 7 r -Y )V^ti^(z, . ME'I^ U IE 

w-rrzm^iz. ms^ft'zrms.^^rzi^cr). y^--^-, 

mz. '^mmm*^h^tmmLfzi%^iz. mtmrn^of 
r/ta Lxmsd^n-z:m&t^fcif>cD>imimn$-^t^^ 

St. 

msS^n'^m&-t?>fzib<7)fmi}^^^iirz^iz. m 
iiT9-t:xmmznLXT^-t^is'f^i-?>^fkt Srfil 

15] ■iz:^MMiX'f>^xmt,zm,^t^L 

^raarjatf ^ ^> If if i: 0 Srfff^-r i. i: V ^ a ^^i#o 

itmz, '^mmmt^hhtnmLfzi^^z, mimrn 

HfrfE^«^^}g^-rs/v:4^<o«S*<||^T$ix^v:^C. lif 
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cw^js 1 7 ] mmT^-txMmTi>h:mi,zTi^-k 
:^m.mi9^&tsmmzii\,^x . ^^mT'7-^:^m.m<r>m 

f,z'Sno^WL^mzmth:it^^t-rhWmi 6{c 
cw^jsisi T-p-^xn^x-h^xm^z^LXT-::' 

!m.^'^om^ii^hi>i)^iLoi)^^m^hkMz. ^mm 
wiss^wim&'thti)^<mwm^^ixrz%^iz. m 

i'f^ixtz-!ii V i^-Mm^m 0 ttj Lxmm^?> ztizx 

(c. m£o!im^nozi:izx*)mm^i^<Dmmtfzim 
[000 n 



[0002] 

(t I) '-K 'J £/-<0!e3^¥g i: L T (4 , at TCOKeyNot 
es {BFIK99] (PolicyMaker [BRL96) ) , GACL [WL93] [W 
L98), ASL CJSSB97]^i:*>'Jn<>ilTl^S. r^-feX(7)«r 

^{4, v^-TiitT^-fea • r7:/ho-/p- 'jxh (AC 
L) tmitlh (Subj, Obj, Op) OSoffiy^h^rS 
^CL'CV'*!.. C:tl.{4, r^-t:XC0±f!|s (Subj) i3^T9 

■izX(r>MM(. (Obj) tcMLf . h^mi^ (Op) 35«it$<x 
i,z^ti>fzi^i,zi,i^ h^^i>3'om^<7m^-^h-^i,zM 

L-C A C L 2:fflS^Sit:^*^'S>S . 

[0003] ±m<7)^V i^-sm^mxii. Ztlt:^ 

^t-thfzibiz. ^Wi^m-^tz^-^^-y-^ y^yi/iim 

fzMZ^ ACL(Subj, Obj. Op) gCond(Subj , Obj. Op) i: 

wmzisif^h h^hs -m^zn^xi^h a c l ^mm 
-rhcr>i,i±tii-b^r,x'SihLmm:'hi>cr>x\ ^^m^^ 

■^xmmz-:>\,^x\mm-thAci.\,zLtztiir>xT^-k 

[ 0 0 0 4 ] AC LtCij(tS$!lffll*t^0^f^ie 

^tmx^hi:><^xhh. wmim^^mL ( closed w 

orld Assumption) ttiiizm^^htl^ , ffliS^iSi^T' 

hhT-^->zxm^t,znLx. -ettc^tjE-fSACL 

Ltzij^-iX. KCUzVf^t\.h^mz»i%mLX 
r^'-tXg5RA>'ACLc7)i;i7)x>'NUt;t-^L 
^v^d^tiag^tl^f^^rtg^-^S. f^{4 

^ilTV^^t^iSO . ^f^Srit-ri: VWitDefaultiti&*i 

[ 0 0 0 5 J i^-<7)3fii:6^t=c: a LTtHStifci. 

^nmttz^^^Y Q sttzMN o(^2m.x'mtxof,z 

LX^-^h. OtO. ®^3t?-ACL (subj. obj. op) (C 

LT 1 i -''^{4 0 ffiK^-rtit^mm^ . 

[0006] 

[%Hfl*<iSi^LJ:3i:-rSigS] ±^LtzXo{z. 

(^r^'-bxnfmiztin^yti'j i^-commtmii. r^-t 

XS^lCjit LT.-KU i^-SrfFWL^cSm^Y e s i7t{4 

No<7^2mcr)\,^-rtlt^tLXi^i, -t^hib. TI'^X 

^mzn L X zix^pfi-t-ff $ ^ V ^i}^cr,mm l j&^^t a ^ 

i:**-C#^V^. Zcofzib^ $>i>^n-imrz-^i£Y e s 
(Yes with condition) J: d^JE^^rtra ^i:*^* 
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[0 0 0 7] Zcr>tzif>. -r— rJ'C0Bt^-fb^7^-v-y h 

(0008] ^%mimL<7)X a tctmmkmimm- 

[ 0 0 0 9 ] gC, ^n-n^cr)T:^-i:Xt^»HZi>\,^XW 

m^iih^i^/}-is.izm(7)^i'¥im&-tt >i t ^m^-t^ 
^iz , mmmz 'Mmm<D^mzm-i mmi^ndzt 
*«TS= s J: a (c-r s c: t ^rflbiOB -r s . 

[00 10] 

[^Mr«?2^-rs^v:A^<7)^S] *^*^-&SW<:^ti:, 

i,zTi^-tx-thfzi^<r>Ti:^-^xms^^ifHifx . V V 

z. (TMfrmmtm^mz xiommt fzii^^^mx-h 
^bmm$tLtz^n^cr,mmttziimm^m^^i,w{T^ 

[0011] zzx\ mf^mt. yi^v i^-mm^m*< 
^mmfSfX'immx'^^j:\^^mzM-ti>mmt fzi^ 
m<^^miz!Btxmwimif?>ztiiiX'^. mnmmm 
m^mi. mr^mtm^h^m^iz. v^-mc^tufif* 
m^^v'^-mm^m-i^^im-^fz^f^^mmtrzii 
*3Sr^ig*>tcov^T$ (>izmtthzb ^nmt lx 
i^s. ztuzx^. ^f^F^ofHrnizmmzMm-r^yztiji 

ti^m^^mn^mcomsEizit, mm. mf^m<^-=ty 
[0012]$ hizmf^mi, WfT^mmE^mzj: 

tBmtfzlimmz:m^^i>fz!^(,zm<r)y'-:$'^-^l>zM 
-rsrr^-txSr^-rSJ^C. Ti^Oi^-mm^mzML 
XZeDy'-:^^ji^^cr)T::^-^XWiSi^:WnL. :t^0'>- 

mm^mi. yi-Uij^t^^^mif^T^^-^xm^tmrn 



iz. mn^m-(^^j:^ixfzT^-txWSizMLXt. T 

i^-txnMLX'h&'r-i^izm^mft^tifzJti v i^-^m 
commz:ffozti^mttx\>^^. ztuz^o. 

<7)i¥«i Ac {iimofci^ tcHilf W r -fe X a 

ztti^mt^£^^x'm.tix\^^h . 1^. x-^se^i: 
ii. T9-^xnMLX'hh:SiM<7>m<7)^^X'h'yX{>. m 

[0013] zcDmn^mu. x-^ yr-t ^Kf o»§ 
t. n^ui^-wm^^i}^hZ(7)T:^-txm^t,zm-i,T 

'omm<7)mm^mMX'^:^zti:nmtLxu^. zn 
izx 0 . ^mzm-^mmtfziimmizmmy'j:mm^m 

ML-XmX'$>hm^iZii. XML-r-^h^^l— /Pa: 
T-^>l>XSLro^r•y-9-5:fflV^i,C:i:*^-C'?'•?., CiOJ^ 

miv^h(r>immx'hi>. 

[0014] *Ar, i'|.a5*»<i.Blf«co-r-:?7 
■fr&i)^i}-i:m^-ti>T^-tXpm:fjmitZ}i\,yX . 

wmx' # =5: 1' ^^m^h hi^iz. zc^^n^imz-t^ fz 
ihco^mtmn^mt^ a o ii^^mm-r^ x^-vrt. z 
<7i^n-imz-th tz>fi<^}fmti^mf^^x'h htmm^ 
ixTtii^tc, ii^t^^vm^mfthx^ yrt. z<r^ 
^z:^z-thfit><mtmii-w^'^ixtzmz. .-Ki; le 
m^(n^x<r>$k'^\,zn-thnm^miz'^\:.x . Z(nr9 
^x^^^V^-^^ht-^-b^^m^-thx^-yVh^^ts 

ahti. 9.wm\.z\±ii-t^h^w^mmt.fz\fm.'fhtz 
iibco^mx'hi>, 

[00 15] zzx\ Tttoi^-tm'pco^i^iw-m-t^ 

smntfz^v '^-im^c^mit im^Lx-^W(^^ 
m\i:mtii^:s>xy^ yTt , mui^titzmmco^n^^^ 
nmTi>xy'vrt. z<7)mi(o^imi^^<oitx'ii 

Wmi-^Z til^X'^^^'^i^lZ. A>*»S^$-m4^>T. . 
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(r>muzm-^^^xmmmizittmm(^mj^&im 

cfcdicwf, ^mz-km-^mum^h^m^izm 
m^kmm^mm-ttztt^x'^^, i^. m^ma, ^ 
u i^-muzm^mi:^^Lxii^ , ■^<r>m^iz l/z 

i}^'yX^^-t^J:oizLXi>B:^\ tfz. PO— co^frC 
-^tWct^mmtLX. Ti'-^xyfVf'SIt^j:h^Vi^-M 

[ 0 0 1 6 ] $ .-K 'J i^-!ffia!4'<7)^f^2r)1IS-r-& 

[ 0 0 1 7 ] § i^iZ. .-KU S^-ie^4'c0^fr2r)1IJg.t-^ 

■thXr-yriz}i\>^X^l/tii^iitzmmtzX<0 , m^cT) 
f—^ yr^ )V^t^ ^> , 'J £^-ie3*4'<^^frCS-:>% ^ 
xmtjL?f-itz\mmi'froT=-i!^W>^^^^.\i-,-t^y^7- 
•yy-b. m^j^^tfzli^^Vrofzi^iZiSi^^T:^-*! 

i'nofzMZii^m^Ti!' -tx^mznt^T^^ -txff^ 

^ar^-r-SXx-yrtar-t-trCfc^i^i: LTV^ 

MiX'h h :SiM<nm<r>^-9tX'h t t, . i/iL<D:XMcr>mM<r> 

<,zW&tt:%l\immzlri\,\X . Zcr>yuy=7Mi^ 
t^t:>n'^(r>ir—^yrAMZT'7^X-^htz^<r>T9-^ 



mb. m%^iifz:ifo i^-Emf^iz^c^itx-ummx' 

mtmn^mt^b' o i}^i:mm^ h^mb , ^ co^f^SDH 
Ki-^tzi^coumtmn^mx'hhbmm^ivrzm^ 

fzi^(r)mmf}<mn^ix.fzmz. .-ku ie3S4'co^To 
^mzm-^wm^^i^zmtx. .lor^-fex^^^ft 

iti>cib^nmbLx\>^:s>, z<7)Xdiz'rtns. z<r>y 

x2yvl^^u-Y\.tz^v>d::i.-9\,zii\^X. 

<r>r9-^x^-m.znm'thT^^zxwm^w^'thz.b 

[00 19] CICIT'. ~Tuy=7M±^ .-K'Jv—fffi^ttico 

^mWth^\,zii\\xmf)ls!,^txJ-zWm,z)^^ ^ fh'M. 

^^Xm^'^^1l,fz\i^-^^'fio^-9^^t:tk\i!,-th% 
mb. ^^■2,:^^tzim3S.%:rfotzmZ'Z^*£T^-^X 
Wikt:mf^h9mb. ^^Tl>^t.tzii^t:<inotiih 
iz-2^Wj:T^-^XW^I,zm-?>Ti^-^X^^<7)m^i:^ 
mzm^lz. y'-iS'^j)-^cr,mtS<^tfzami^mn 

■t^^mb ^THirfEn y i^^-is^izmff^-t^ z b ^nm 
i,znL. ij^-h-h^^'km^-thtzisbi.z-nmmzT^-^x 

[00201 t.tz. *%HJ{i. zt y t 

^^frSftftttT, ZcDT^-i:xm^<7)T^-^XM^X' 
hhy'-i^ izmmiHf (:,tifz^>J >—imt:Mn-t^!>St 

Mb , ]R#$iTJt,if 'J i^-isM'p^f^iwm-r&mm 
b , mn^tifzn^v >^~im'p^z^<7)ttx'immx'^ 

3t)Wff^lgA»i:' 0 ij^imm-t^^mb . zco^f^^ms, 
■ri>rzif><D!imi3mn-simx'hh bpm^tltzm^^z^ 

commt^Wn^tltzmz, 7itUi^-^'pC0±Xcr,^n- 

izttr^wmi^mzmtx . z<r>T^-kxm^i¥f-^-t 

m-^m^mb. z<7^tm^m-hz(^ruy^2^i 
m^\i!,Lxm.m^hm.m^fkb^mtfzzbt:^WLb l 

yj^cnm^mmb LxcD -Roum^ummw^irt 
zb^j:<.. ^izMbx:^^m7)m^im^-rhzb^ 

[00211 zzx\ ieit^S{cisii$^i-cv^i.rD^ 
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[0 0 2 2] it:. m-<7)y-;^T'ie^$ii 

iim^ht^^z. ^<^mM^^h^tmmLrz^i,z. z 

n^titzm^iz, zcDTi:^-t^mmznLXT^-izx^ 
^^^^^mtimti>ztinmbLx\'^^. zcoj: 

oiz-ttm. h^yxa—'f^y^i:^f^i:LXT^'b 

[00 23] ^7t. ^^Mii, T^-^xnm.'hi>^ 

>'-timi,z-^^hmm.coT^-txW^^^ifHiffz^ 
Limiib'^tsZt^^n't LXT9-^xVf^^noZb 

nmb Lx:scm<r>v^it^z'o\^xhnm^z^ozbij^ 

mx'hh. 

[00 24] iTt. *^HJ{i, T^-bX^mX-^yS^S 

mifi%^^ixtz^-^\.z. ZcTiT^-^xmSizMLXT^ 

■^xipf-^^h^f^bimz.^Zbz:nWibLX\>^^. 



x\ T^-^xfi^xhh-scM\<zTi^-^xmm^mtjhts 

x-t^zb^i¥7:T9^xvf^(r>m-mn^b lt, -t^jf 

'kn^ZtsnmiT9'^xnM^b^j:'ytz:PMX'i^t.tim 

<r>:Scm<r>—mx'h t t J: v n 
[00 25] tfz. ^^mt. T^-^xn^x'hh:P:m 

^znLXT9-^xm(r)^^M.X9>-Tz:T9-^xmm.b 

-oir^'}i^-m&^mrth^m.b. co.-ku v—ia^tc 

h^n-'km^-thtz'txr}. :?cmi,zT^-kxm(r)i^-i M.X 
^yy^T^-^xmmb Lxm%TLijmmi'<yommii^ 
hhij^no-b^^m'^^hb^t.z. z^mmi^hhbm^L 
tz^^z. z<r)m^^m/]hLx-h-h-h^n-im&-t^ 

tzli^<r>!)mz:mi^^th^WLb. Z(r>^iPr^m&thfz 

ifxrmm/^mi^ixrz^K.. z<r>T9'txmmznL 

XT^^-tx^ifsjTh^^b z:mx.hZb ^:^b LX 
t^-S. ZffiXolz^tHf. mmb'j^mi^T:^-i:XW^ 

immizn ozb t^mb t^h . 

[00 2 6] $/i>(Ci^, *^BH{i, ir-'9yr^MZ 

tz v-x y h i: . 5'hgp*»<^ c: <r>^-9 yr-i 
Mzn^-tx-t^fzibcTyT^-kxm^i^lfnifX. V 
V—X]i^A:>(yhi}^^Z<7)Ti'-*zXW^<7)T^-bXM 

^xh h ^-^izmmm^r (^nfz^r^ y i^-ie^^ax o tu 

fiffi-c# ^ V ^^m^h h is^tc . itLcr>^mi 'ftozbf^z 
zzx\iti^j i^-nm^wfi^mmn'Tximmx'^ 

^j:^^^n-z:mmt.fz\tmM-t^tzib{,Z'SL^tc^mb LX 
T^-^xn-SLX'hhT—S^y )Vcr,'T—9m^<r) 
T^-^XMnkXh^^-Syr-iMzm-hT 

■:^-^xmmt:mtb\^'^tzmv^tfih^, -r^*)*), zti 

^(nm^'smT-thZbifiX't^m^f.zcr,^. liC^Ji^- 
imi.zzixh(r>^n-i:^T:^-^xmS.i3m^^ixhZ 
bb^j:h. 
[0027] 

{WRcr)mmcr>mm.i ^t. mimmiZ7n-rmmcr>mm 
\:zm-ii\<-^x z<r)^m7:umi,zmm-th , t-r, :^m'n<^ 
wm^mmi-i>b. ^mmxii, 7*^^rx$fJ^al{ci5^^T 
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C 0 0 2 8 ] HI (1, :^mii^cr,mmXZii »h T9-txm 

h tcibcrmvh h , mmf,zii . 2 0 0 tix-^' 
l^-^-^N'T'Si-S . ^^-^ 2 1 0 7 r ^ /UT'fc 

fcWf-'-:5'«=a-^-^N'2 0 on^mz:nmx'^ ^Zt 
^mi-th. ^^r2Ao\iT7^xmm^ri^xr-M.x' 

h 0 , JL— f ^iEifT^i^XT^A 2 3 0 i: !^^<^a. 

:7i^it-rs^xf-A2 2 0*^set-r■?.1^-t';^s•f|JfflT' 
ssJ:o^^r^'-t:x^lJfflI-ri.. ±tz. x-^^SS-^WN' 

2 0 0{S, r^'-b;^©Jffll-9-r>';^-fA2 4 0{Cj:|.T^ 

I Ds-fliig.-r-s>ti6(^^iSi— !f*%fm-rsfflii«offl^ 

0$-A^]LfcO. ^'-YAX:^'>'rHf->'N'4 0 0*>'i>«ia 

[0029] 'f-9m-^-J^2 0 OlCfS*rt$ixTV^^ 

t-r, ^— fS*5 0 07t)»^>-r-5"i=a-tf-yN'2 0 OCT) 
ifi2liE-9-7'i^XxA2 3 0icr:7-fe;;^LTj^:^xA 
tai?'-f y-fl,, ^— T'^'^-rA 2 3 

mi^ixX\^hJ.-^ («S$ixTv^Sx-^^3tStc 

i?-t;^$iJfflI-9-7"i'XT-i^2 4 OtC^tLT^ff-rS. T^' 
-fc:X$iJffll-^7"i^X-fA2 4 0(4, f l2iiE-<f7'i^;^x 

A2 3 o*>f,s(taxo7t:o^^ ymm^m^T^^-^xw 

^(ziBbT, m^m'^m^mm^^:x:hLXTi'-tx-si 
's<7)p]mzmm-ti><, r^-txmm-^ry'iyx^i. 240 

tzt%-^ii. 'f-9<mL-^ri^X'rL.2 2 0l.ZX'oXir- 



aSiX, ri?-b>'.$iJti|l-^7'i^;'xxA2 4 0 2r:n-LTa-- 

■!fsi85fc5 0 o^iUfi^tis. pmumc^i^TW^ 

i-i>*>\ r;7-fcr::i$lJtJP1f7'>';^T-A2 4 Oti, 
im.(D\Hmzi.'iX\,±. m.^'A^tx.tznr-S^'Smi^fz 

[0030] I12J4, :^mm<7)mmizi5ifhT^-fzxm 
m^>xy'A(D±pm^iim't^t:if)(7)mx'hi>. =sr 

ia2<7)T^'-fe;^$iJffllvXxAl 0 0(4, lllc7)T;7 

■kxmmvn^xr-M, 2 4 ocffis-r-s. Riitctjv^ 

T, l^-f-l 0(4'1^U>'-|Tfffi^:i^'i-;U-ej)0, T^-b 

^S34SrS{tT, Ti^-txMmx'hh7-'-:s^tzmmmf 
^ixfz^oi^-Mmt:mm-t^. ^2 0i±mfmm^ 

-mw^fx-ammx' ^ ^rv (ot , i: p? 

0 {4i^^f ^ y ju-/i.T'J> <0 , UitrfiltgeiiE^ 2 
0 (c i 0 fFfffi^H^SA^^^gt'S) -I. t fiJBf ^ tl^cJ'hgC^fr 

i:*^'T'^^. L/c*>'oT, i^fi=«lg<56iE^:>''i-;I^2 0 
(4, ifttT^:i/'jL-/l-3 0A^ai!f*^%^(c(4, ^Ui/- 

ffl«$i^•rv^s^^•m<om1t^^''J.-;^3 0{^J: 

0 °rSg*H:ov%T*,^iE-f -S.. ^?■^4 0(4'J V-X 

■fAi 0 0(4:7 :/eA-rJ'tcTll31§n. ilE^-^i^'j. 

-Mmm^y\^^-9<.z±Mi^^m^mj^^ht:.i^ 

[003 11I13{4, m2'PtZ^^tltz. 

10, 20, 3 0izXiiiiJ^tl&7'-:^<^\f^mt:Mmt 
§T— y;l^-C'*>S. H3$:#H3-f-^i:, TK'Jv-^fffi^ 
i^'^L-zH 0tcA:^$iX-g.T^'-feXg5}<l 1 0, 130 
C')^fiS(4 (Subject, Object, Role (or Did). Operatic 

n) x'h*). Ttcvi^-mm'fii^'^-jui oi}^^^ffmm 
tm'^'j^-/\^2o^m^ti^n^^f¥cr,mmi 1 sco 
mmt^f^uxh {Condition-List} "Cfto. mrmi^ 
«!iEt>''j.-/u2 o*»^,i^^T^i/'A-;^3 o^m^tih 
mnm^i 2icr>mmimf^i^^&T-:^-t 'y h 

{ Instruction-Set ) X'h h. ttl. i^— Sfffi^: 

1 0 (C J: 0 V V-X >- h 4 0 t/^^^m^tii 

^ilh^Oi^-sd^lAOb. mi<r>^-9yT^)V2 

1 0i}^i>^—^m-^y'i^X^M.220iifLXWl.n=^ 

3 Od^'bT'— 2 2 0 sr-^l- IXt"—:? 
yT^JU2 1 O^iU'bil-l.ieKffifgl 3 3i:(4XML:S: 
S (XKL Document) T'S>S. .l^'J i^— IFfif^ v'jl 

--'HO, m^mmmm'Ei^'jL-ju2 0B(X/mn'E>^j. 
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-)i'3 0i)^Cy^ix^'tiititi^ixhT9-^XT-Vf-^l 1 
2, 12 0. 13 HiT^-^X^m^ii-th'^^^ff^ 
•t7^—-S'¥\ (a string of "denied") T'i> 0 , -I^U v'— 

i¥iffi^:>''j.-;n o*>^>ai^]$ixi)r;?-txitnri 1 1 

\tT'9-^:mi^{,zm-^f^m^^v'-9¥\ (a string 
of "permission") X'h^ . Htf^rv-'*— 0*^4)* 
:^$iXl>«Jy-Xh7VX3-h'l 32J4HTML, X 
ML^OrStS^x-^-J^iM (HTML. XML. string, et 
c.)T'i5l.. 

[ 0 0 3 2 ] 04{±. m2f.zfr^Ltz^m<mm^zi5\,'r 

^ix^—iico^oati, ■tf-*>fecor:J'-fe>?.^^l 1 
OtcJ:0e»j$ii^A\ SfctiT^^-feXS^lcittSM 
ai04'-C1fScOUltT^:i/i-;l^3 0(Cj: 0~<?:W{c^fi= 
T^-feXgiR 1 3 0 tc J: 0 Wf a^JtcSM^ai. . 
r^-b;?.^^ 110. 130 ^^ftWtl. t . U i'- 

t::*tJE-^-2.'1<''J lEa? 1 4 0 $r U V-x K^i^ >' h 
4 0*>4>^aiL (X-r y7-40 1) , ^cO^-KU i^-fg^ 
14 0$-iPfflS-n> (X7^-yr40 2) , -J-tT. ■kx<r> 

v-iea: 1 4 ocn^co^mmm^mx'hixM. ^ 

iOp0^:lltCjEEtTT^-feXitari 1 li7t{4ri7-feX 
^il^ori 1 2i:C^^^m^:. ^fSr^-fe;^Smi 1 OS: 

^^TU^ti— (ftcm^-rs (>^x/r4 0 3. 4 04. 

405), 

[0 0 3 31 Z.tx.l>zm,. JK'Jv—iei^l 4 0^7)45 

^va.-/H 0*>^>|ft'fT^Sg1^E^i^-a.-;P2 O^i'hgC 
*fr<OtS$gl 1 31}<m.^ixi> (X7^ yr4 0 3 ) . Wyt 
iafig«!aE^i''i-/l^2 0{±. S^XxAi^tcfflS^^fV-^ 

i.i^ff^yA-;u3o<?)y;^h^jt-7Tv^s. -eciT. 

^ff^tg1^iI^:>''i-;P2 0(4, ^hia^^frott^gi 1 3 

tHtT^i^'i-/U3 0sr«I^S (Xx>yr4 06) . 

LT, ®S'5:Wff^:>''a.-yP3 03&«l.o*»4>:5:3&»-5/i;^ 
r^HrX^i^pari 2 0i:^/^3^:Sl^rM^r:7■feXW 
^1 1 OSr^'frL/iJL— ftcEl^^l, (Xx-y7'4 0 

7. 4 08). 

c 0 0 3 4 1 'Mm^u^n-^nmL^tz^immx' 

§^lfttftv'i-;l^3 0*>l.o*^-5^c^^«±, K^'-r-S) 

m/mmi^rThixh {xr-y-rAoi. 409) . 

^<4. ')\/-7.Vyyxzi—Y 1 3 2*<ai$il^i:it 

^'Ji^-iaai4 Otfoff(iiA^'Mff$it^ (X7^ yr4i 

0 ) . -e LT. g*IW(w4f J i^-iffiS 14 0 cOffO^T 



^^T^ i^' J. 3 0 ti I aj $ y y - ;^ h ^ v;^ 

ri-Y\3 2bMzTC^-^x^m 1 Iti^^o^ms-S 
I^T:?-feXg5Rl 1 Or^tfL^tii— rtcm^^-ti,, t. 

fz. mx'^i^ :2.-iv3 oi.zi5\,ihmm^n-<^nm(^ 
^m^T^-^xT-m^x'h^m^. ttzumf'^i^ ^- 

)i'3 0ti^'^mVU^f^<^^\.z^^Lfzm^ii. T^-fe 
XT-m^^l 3 1 tUd^mSrll^T^-bXg^l 1 02: 
l%^f L>t:i— (f^lCHlig-rS (X7^-yr4 11), 
[ 0 0 3 5 ] dCT, mi^i^^—)\^3 0X<r>9m\,Zi5 

Mi&T'35l>:S:»4'«0flil«0-fe:7 V H >'tcSft LT r^-t:X*>- 
'iJ^^:J^{±. r^'-fex^^Rl 3 OS-.-Ki; V— fffiffi^i^' 
1 0 [zmr LX . Mifiimiznm^'th Z t ifiX'^ 
COidlc. ^V^^^imtz^fz»^t,zrffiixhMm 

W'Sr r -fe X g $• r ^ -fe X orofF«^« -r s 
3 0 {ctiv ^T . '^m^^^n-imfz-ttz^\.z r 

[0036] iXtC. ji-firO^ i^'jL-yUC^gLT. Wl^^ 

mm\>zmm-th. msM. ^u£^-pfiB^>''i-/no 

XW^ \ 1 OSrA^JLT>'^•^^-^'$:S^tlXI. (Xf--/ 

7-50 1) . r9^xw^<7mi^\±. E6ori7-txs 

^ri:) Sril^'J-rSx-rJ'fi^S Subject i:, T9-^X 
n^^W>'\-th'T—9X'^h Object r^'-feXJtm 
\.Z^h^^^WS!\-th^-9X'hh Operation tar 
ys-^^— :5'i:-ri.. C:oy\-^;'<— ^<i:. rsubjectA^Obj 
ect{=it LT0peration<7)Slf^RR(r^-feX«) $:^^L 

af^£0!l*»'ie«$*lTi3O. Subjectjtl^'Nihon Taroh/IBM/J 
apan"C^ 0 . Ob j ect A*http : //admi n . tr 1 . co«//f orm/exp 
enscxmlT^bO. Operation**read(html)Ti>S J: 5^: 

X^-mt TNihon Taroh/IBM/Japani:^^-?:^.— tf^-C'D 
^'f >' tTtai— if *»\ adiDin. trl . coBlf->'N'{cg*»iiT 
V^^expense.xmltV^^^r-^yWCS^LT. HTML0 

tj, c:c:Ti4A:'3arr^'-bxg5gi lOfcL/cAv f^^T 

^ >''i-;U3 03!)»/i>aj^J$*i/cr ^'-feXS^ 1 3 0 a:A 

[0 03 7]iict=, uy-xK^iP<:^h4 0iO'i'tc*& 
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T^^:^W^f^v:^—9(ry^Xcr>)'^V}<—9 (Subject. 
Object, Operation) t^-f hm^^'^m:t h C^'r 
r 5 0 2 ) . LT, ^ai Lfz^'J iy-m\ 14 0a: 

pTi— rSria^iJ-ri.x-^'T'J)-!. Subject fc, T^-fe 
:xfl=^^I^S:is«iJ-ri.x-:7-C^>^ Object Ti^-fe 
;^f»=WMf^S-ia«iJ-ri.T-:5' Operation i: . T^-feX 
$rlt^t-2.^frOiSMT'$)S Condition h^^-N'^^ — 
ryir-Ti*. Z<Dy•<y;<-^^^i. '"ConclitiontfO^f^*^}!! 
a$il;/'cB#. SubjectTi^ObjecUCjit L-COperationcD^# 

i^-mWlcDMi^mmm^tlXtS O . Subject*<einp 
1 oy eeX'ifi 0 , Ob j ec ti^ http : //adm i n . tr 1 . com/Zf orm/ex 
pense. xml X'h 0 , OperationTi^ead (html ) X'h 0 , Cbnd 
ition*<transcode(in. out)T'*>5 J: 0 z^—MM^l 

•fifciiTy'O'y-i^sylzMLX. x-:5'2-HTML 
IZ^-r^Ztil^X'^ i>^l,zm'0 . admin.trl.coury- 

— V MzW^^tiX V» S expense .xmli;V->d7T^ /I^tCit L 

COO 38] ZZX\ ^gttfi. Subject, Object, Ope 
rationmcomi3^^iX^'tim^-^^ZbX'$>^. mtii. 
Ti^-feXflJffM^yN'^;^ — :5'<?5Subject*< 'amano' 
{f, r^'-feXSllffli.lf'Jv-^IIJiOtft' 'amano' tV^^ 
i— ID-^ 'amano' ?r#tjTRLi:V->3^;U— 7*^ 

[00 39] tfz. Tl?-^xmm^ U i^-«IIJ<^«l^lC 

y-X K=^r j.^ yhA Ocr)Mz}m^ixX\^hm^'f- 

c7)«a^#SS-rS i: . --KU i^-^fiBi^ A -/UNIX'S T'S> 
i>M^<rm^^M.<^VmX'hi> Environment S-^n'^ 
^ — :7i:-r-i). C:0>'n"7^-^'{±, rEnvironment{i;tf 

'}'^-nm^\.zMbi.xmo i ^:mm-th. ttz. mi 

tC<i. mm.7—!^<n^^mi}^wiML^tlXi6^. Nihon Ta 
roh/I BM/ Japan i: I ^ JL— if {ieaployee t V ^ p o— 

mi^Rif^ V i^-mi(^Mt^mizmm-ttn£. r ^ -t ^ 

^^tifeSNihon Taroh/IBM/Japant l^oi— tf*«.-Ki; 
i^— SilJOemployeei: Wo n— t o^ti— !f i: -5 

[0 04 0] MBiJ«liiE.«!igi: LX. X^ yy5 0 

2x^W(.Lti^o •^-mwwsLh^m^i.z, b'<7)Xo 
izm^<o:tiVi^-miz:wm-r?>i)^^^^-ti. (x^-y 
7-50 3) . mi.ii. ^vi^-muz&^cmA^i^m^ti 



fflStCT^' -feJ^Srit "T LT Li 3 C i: ^m±-th Z b ti< 

T'#i., ■^wiiLfzmw^\>^^<7)imi>zzx'mm- 

'^^^b-Th. 

[00411 mz^ J^-f-y 7*5 0 ST'SSSSil/C'-KU 
-m\<r>^'^U^mmth (X-f-yTS 04 ) , .-KU v 

#i^>-h4o*><i>M^-ri.ffl?:iixoai-r. s^^ns 

c7)it>T\ 'Jy-:^H^j.^>h4 0*»^,ffiOlfi$ii;tffi 
[0042] m.Z. XT^ yrS 0 3<7)fp0^m^4aj^L 

(xx>yr50 5) , ^x(r^^ifim'mmx'h^t^ 
■^xifi%bmm^tthnr^\rr9^xir^b^h {xy- 
•yT5oe) . ttz. ±xco^mmm-^mx'$i ^t^-o 

—:>liLt(r)^mmb ^j:h^\tT9-^X^W^b-rh 

^tg^^^>-'i-;1^2 0A.35!lS2r^^f-ri> (Xx-yTS 
07) . i'l-glS^fl^TJS^tt, ia70^^f^<7)fliS:#H3 
■fSi:. --i<'Ui^-fffl^:>''jt.-;l^l Ol^T'KTi)-S*^i:' 
:3 7&^^BB<50»||(50'JX hTj>-l. External Condition ^ 
J-^yji-ifb^h. ^KD^-^yji-S'f.t. ^T9-^XUn 
.■Kl>>'— SIIJ<75Condition<^4»T\ lg*i-f — rJ'-^, 

i-/H 0A»4,|Ilfi=®tg^^:va.-;P2 0^, expens 
e. xml ^ H TM L (C^-T -5 CI i: -S^^i:' 0 

—)V3 0{ziihVmi:mx St/;K 'J V -fp W^: i 

1 Otc^ifilAiMO, «*IW^i¥fi^mc7)fiJ^j&i^§tT. 

2 0 ifv:(S^fi=^ vi-yus Olcfcv^T^IS^hSP^fr^ 
If fiST't 'Sr \-^^fz\m^X%t£:\ ^ i: f J»r $ ^/c^^ti , 
-■K'Ji^-fPfffi^i/jL-yH 0^ZWii>:Lb-^£<T9->c^X'^- 
^'^btch. 

[0043] Il8{i, ilff^tg^iE^i''i-yl^2 0(CJ: 

X'hh, 09{S, Ul^T«iSg^^v''i-/l^2 0*^«^^4 
x-:?<507 :!■- V y h ^W^hmX'hh. 08 $:#BS 
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LTSIi$ixTI/^.|)ComponentC7)ff$Bari^;^iai-r (Xf 
■yT8 0 1 ) . ^rfti^sL-tl^OXh^^f^^im^m^ff 

t.^ ^mitTl^-tX^^CO^f^^X'h^ Condition E 
xpression i: , ^^^^MT^ i>::i y^t^—^^y hcD'^M 
Sr^-r Capability ^Sr^JH-fi) 3>-'-K-^->- h 
Sr^-f" Component Name b, '^y^—^^yhCOmWiX'ib 
h Component Argument b^J'<yy<^—9b'i'h„ I29(C 

ji^iifT^ -yi- 3 0 1 ra-r ^ mmL<n^w-mmm $ 

TtSO^ Condition Express ion^^transcode#type#l(*.x 
ml. html)T'*>0, Capability a)eclc*>*AvailableT'S> 

9. Con?)onent Name7b%:¥tools¥jar¥enforcerl.jarT'?) 
0 , Component Argumentj&^c : ¥enf orcementSftranscodeft 

<?>ttfB{i '■transcode#type#li:V^-5i^li5^S:}ffyt-rEn 
forcement^fi*^'^IJfflpJtgX'J) •) , enforcerl . jar 1 1/ ^ 3 
TU^=>K lCtranscode#type#l .xsli:V^0VN°^;>< — rJ'^ 

r^)V^^-x.X'T-S^M-th:Lh.^z^^^^(r>'mi 

[ 0 0 4 4 ] J'l-gp^fri: \^XX-n Lfz'm.cn^W 
*^'c))ii#lC— o-r-^^ft^arK 0 iii-r ( X-r •/ r 8 0 
2) . -etT. X-f yTSO 1•^^X^#U Recondition Ex 
pression<7)ftitC, Xf vT^ 0 2^1X0 tU^flTt^f^^S- 

tCi^CD^fl^i: Condition Exp^essioni:<7)Bf^^^T>'K 5^1- 

^^^^:^m-h±x<r^mz.n\^xm.-^-b^^iih tx- 

T^saaSrillT-r-S (;^7^ yr80 5) , 

'Vf^^f t-|> . ZCOt^ COmr'i: -JjL—JU 3 0 ^(7)^nt^ 

^12 1 commit. m7'i:i^A-/i'Vxhi)^^m^iii^ 

il-tW^t^feft^ Component Name ^Component Argument 

<^m^-^h-^tim%!l(7^<JXhtLxm^Lfzt<7)X'$> 
•2). i5!l;c{f, ((lotusxsl. jar, transcode.xsl) (domhas 
h.jar, signature. xml))T'S>l). 

( 0 0 4 6 3 0 1 ots. mf=i:i^'^-fU3 o<r>m^mi 
nm-t^mx'h^ .mio t:#Bs-rs t , mj^t-ya.- 
fi^soii. m^s^i^x^^smmt^th^ms 1 1 . xsl 

rn-t-y-»f3 2i:, r^^^-Y y«rt|:^7 -f yUrJ'T'a^/^ 
-^3 3tarfii;tS. S#a;?^/'3SBi*lfe«iai¥g3 1 

ffi-r^. XS Lrn-t -yHfB 2{d. XML-f-^'i:^ 



/l—Jl'^mi'f-S^X'mfz^XMLy'-^ ar^^-r^Si^ 
iO'y-;WT'i5l.. 7-fyP:5'ra^7A3 3(i, XSLr 
o-fe y-»f3 2T'{i^!ta■C#^:^/^l^^£0|ll^T^i^$•||3S-r 

C: i: **T-# S . 3 0 tc J: S ^^T3?ft 

7'-^yT^jU2io<r>fi><7)XMi.:PMi>zMLx 

mn^l 2 Hi, XML5:#(c^^t-|,^;l.-;U^ie 
aiLfcXSLf-'-^i: LT«3S$iiS. 
[ 0 0 4 7 ] 0 1 1 {i. ^lT^i/i-;P3 0 izX^mn 

fm^mm-t?>yci-^^r-hX'hh. mi i^mm:t. 
St. i-r, »#a;^^/^s©^«^iii*g3 xs 
LTie3i§n.7t^;p-;p (il^^T^i^l 2 1 ) ^si*if 

7-1101). iCT'. atT^i^'i-;U30{cJ:-Sj!MI 

{i, e^ior^-fexg^i 1 ot,zn^:^nm\,Ziim^j:^ 
Wim^-thtzih{zm^^ixh^mx'hh:itii^c>. ^ 
^lK-C'fci.xML:S:»ti. m'LhT'^-^xm^i 1 

X^^l 1 Ocr,T9-^xnm.X'h^^—?yr^Mzm 

mum^-^ 13 A f,zmmi\,z^)i'-)i-^mm lt 

;?iT7CO:i:#i:<07fr:«it5-ifc«g-r-I.Cfc{ci:')^TO. ^ 

^T^-feXg^l 3 0^iT-?-C^v^-^;b-l±S (x-r-yT* 
1102). -eLT, ^K'Ji^-Sfffi^i/jL-yH 0*>'T 

7^-yri 103). 

[00483 ;Ki;S^-fPffli^:>''jL-;H OtCiOT:?4r 

/i^Jiia^ry y-xh-^a.>>'h4 o(c»#M$-r(w (x 

■r-yri 108), ^fr<7)|gStc3^L7t::fc^m^T« 

8g^^:i-'A-yi^2 o&t;f.-Kt; i^-nm'^i^ ^-iv i o 

{c:a»tT$IT-r-2. (Xf--yri 10 9) . Z.ix\,Zi. 

n-^^tiT9-^xmiSiifT-Vf^l 3 1 t^SrS. 
[0049] .-KU v-pfl^ri^A-yH OtCiOTi^-fe 
XAiit«r$ix:<::^{i, XSLr^^r ■y^f 3 2*»\ 
^^T-S)I.XML3t»l 3 4<7)|g^$:^fa (Xx-yri 
104). lli#-ft^*>L^<Oj: afft L"C<7)P 
W^^^tS:. XSl.X'm.mmX't^j:\^^ii. XS 
Lro-b -ytf 3 2(Cj:-:.-CBf^{l:^3g7&-LO7"ci6i0jg5^ 
iOA*r.ttaXML:SC»l 34(3ifALTtJ<. ^LT. 
Hl^iOjftaJi, jS1^7>f;P:?rQ:?'^A3 3CJ:o-C 
tra (XxyTl 10 5). 

10 0 5 0] min^s 1 2 1 \,ztm^txfz^x(mim 
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^mm^^ixfcztimmtx^T^i (xx-/ri 

10 6. 1 107). XSL7*a-fev-9-3 2h:7-f;u^ 
rn^^7A 3 3 tCct oT^SixfclHlTSr^VXM L:S:« 
T-^J'Ji. Hfrtflgl 3 3 1 LT. 
7^i.2 2 05r^>Lrf-'-^7r-^;U2 1 Ot»&M$ix 
•l.35\ i7t:(i';y— Xh^yxrz-Hl 3 2i:L-Cr^ 
■fzXff^cr,Js\^l 1 1 i:i^tri!'-t::^.^*l 1 OOJIlt 

[ 0 0 5 1 ] *ll]!fSO?BSSrffl>,^fC:B:f*:e^^||M 

•CM.$ iXTtttfg ^ T ^ -bx^^#c7)-b i 'J 7^ - 1/ 
•y htr^LTafi-rSCtSrV^o. C^LTti, XML 

{f<5:Oj; ■ptClEM^iX'S), acl(*, role(employee) , doc 
(http:// trl. ibn.ccNii/xmlfom/X) , read(Form)) <;- tr 
anscode(X, xml, Form). 
[0 0 5 2] Zn^ZML, ii5g*if7=r-A^HTML 

?-acl(amano, role (employee) doc(http://trl . ibm.com 
/xml form/ travel ExpenseAccount. xml ) , read (html)). 
Z<r>^^, Subject*^;if'Jv-|e^, T^-fe;^g^^tCr 
ole(employee) X'—W: L . T ^' -fe;^g^<7)0bject*idoc (h 
ttp://trl. ibm.com/xmlform/ travel ExpenseAccount. xm 

1 )X\ v— ie^iO0bjectT'S>-2)doc(http:// trl.i 
bm. com/xml f orm/X) tZ-^ ^tl^i> C7)<r) , OperationT'S) S 
read (html ) (CJt L X transcode(X. xml . Form) i: V ^ 3 Cond 
iUontimt,fi^ixX^^6COX\ rhf'J v— fFB^i/'j.— 

1 0 t,zj: ?>mm<7)mmi^miT::7-tx¥f^b t£h . 

'J i^-iPM^rv-'A-yH 0*><i>gltTtStl1^^;i^'jL-yl^ 

2 O^it'^fL^J'l-^^mi. XML7:r-A$-HTML 

^z^mx%fo.ir 9 '<zx-^v^^'thh\-^ofkWX'h o . 

transcode(traverExpenseAccount.xml, xml. html) 

[00 5 3] \.tzif->X. r^-feX$iIfflIv-Xf-A 1 0 0 

A<x M L T-ieai^ fd-zn^y - a §• h t m l (c^-^-r 

mff^:i^'jL-/t^3 0{C{±, XMLT'ia^^iXTt^* 
7 ;f — AS: HTM LlC^f •^^vli'JOX S LfEi^Ai^-;?. 



XSLro-b-y-t?-3 2{±, Cl^OX S Lie^,):7C 
;r -At— SriJ&a LT^ffl<7)HTM L-r-^J' ^ 

[0054] 2|s:|ISfeco?gSgS:fflt^T:i:#tcm^ 
(±, h^yxa— f-f y^co^^JtLTSSdCtA^T- 
tfSBijti, ^I;t{fllffic7)J:dtiea$ns. 
acl(user(ID). role(subscriber) . doc (http:// trl.ib 
m.com/image/X) , read)<;- embed (X. ID). 
«i^A-L« J: 3 \zW^t-mixmx<rmW£m^% 5- 
W^%^X^t£:\.^^\t. XSLr^•fe •/■^^3 2{CJoV^ 

sc}f A-rs <t a (c-r , LT . mmzn=m.t(^\^-k 

0:6-aT'l|3l-r ^ i: ifiX'% 5 . 

[0055] i^mm(mm^m-^x^—9^(n:^ 

^V—l^^ViiZW^XuC^ (log) 7r-f ;P^<:0»#32. 
l^X^MZii\.\X. Jr-x>f ^{'t'Ux-f (WI^EIS) 2: 

jt)^'S)l.i:®fiJ-C'S>-5., CC-Cii, iio\^o^^\,zu-/^ 

tft^T-tS^Jfe0iJ^iK-r. C:<r);KU>'-fe^{i«fiJ;t{f 

acl(user(ID), role(issuer), doc(http:// trl.ibm.co 
m/xmlform/X) , write(*)) <;- status(log(ID, issuer, 
X, write, T)). 

[0056] Ci^^c*^ L, \'F.<^i.ots:T9^xmmif% 

?-acl(amano, role(issuer) doc(http://trl. ibm.com/x 
ml form/ travel Expens&Account. xml#l inputf ield) , wri 
tercost=$100")). 

Subject*<.-KUi^-fffi*. T 9 ^XW^^'UZr 
ole(issuer)T'— IS: L. -tXg^(O0bject*^doc(htt 
p://trl .ibm.com/xmlform/ travel ExpenseAccount. xml # 
linputf ield) X\ ^'J i^— le^tfOObjectT'ib Sdoc (htt 
p:// tr 1. i bm.com/xmlf orm/X) {C-^-i it -St^iO, Opera 
tionT'tb'S)write("cost=$100"){;5^LTstatus(log(ID, 
issuer. X, write, T)i:l->oCondition75)Ht{t'oilTV^ 
. C C T . status*<tJlTiO J; o t£iV-}VX'h h^jCTib 

status (log (Sub j. Role, Obj, Op, T)) <;- log(Subj, R 
ole. Op, T). 
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status(log(Subj, Role, Obj, Op. T)) <:- niakelog(Sub 
j. Role, Op. T). 

^v^cOT, statusOl^lcOyl^-yKi^Uc-ri.. ^LX, 

[00 57] makelog(7)i|5RSrS(t?t:lfttf^ i^'i-zPS 
0{±, M]B-t^^m^^^l 2 lifmLX7CT-:^^co 
^^&^*/'!iL^mX'h?>Zt^miii'f-h. ^LX. 

Lxci^m^ii^<^fzi^<^T^-^x^j^ 13 0 ^ai-r, 

?-acl(sysl, role(system) doc(http://trl. ibm.com/xiii 
Iform/ travel ExpenseAccount.xml#log ) ,write(log(a 
mano, issuer, travelExpenseAccount.xmlSissuerFiel 
d. writercost=$100"))). 

■ti'ZtizX'ox-^tmm-^ti^. zzx\ r:7-tx 

'^Xri7^Xtm'^KhZ'thts:h. Lfzt^-^X. 
mz. TtcoT'P'tx^mzmLX , ^(ry^^ifir^'^:^ 
nm:hh^^\,zfsm-^fth:Lh\.zti:h. 

[0058] ^.<r>u^^<Tym%ThMmi. hyy:^ 

3— T yi/coi%'^tmmizxML:^m(r>^mji'-ji' 
tLxtiM^ith, mtif. ^■<-^y<7)^-y-mmizm 
■r^T9-^:^(^u^>'im-tfcif>izmi 2<Dj:a^ieat 

Xi^X^MzmiLXtiK. ZtlirGR Head"i:V^ogP 

ffQizm-th^trnmizm-rhmmmizm^Ltzt-t 

T'fti,. -et-C, &: Subject :c7)a5^$:||^<7)^a^^t 

:S:»$:XSLrD-t ./-»f3 2T'JO:a-ri>c:i:icj;0, H 
1 Si^Zm-tXotcuyt^mn^ixtz-^ti^^^ixh. 
( 0 0 5 9 ] (XC, :*:|lii!fc7)m^^ffll^-CB#S^f^^'t# 
T^-t;?.it^S-ffdll]SSWc-:>v%TiJiD^-r-5.. -fy^'- 

B0^6IB#ti|^:2^li.(^|5|^-C'tav^J i:l^3ctd^^f^ar 

nnrzT9-^xi^m^mm^z''no 'jm-f^h i>. zzx 

T^-tXi^^aemporal Authorization) tUftJ'il 
cOJ:dlzmm^tih. 

acKAnyUserlD, role(eiiiployee) . doc (http: //announce 
/bonus. xml). read) :-get#tinie(T), T >: "1999/06/0 



3". 

Ztm. remployeea-zUSTj^JL— r{±^ http://ann 

ounce/bonus. xml$-, 1999^6^3 Btli^k^ <?> tfrea 
dttRgarj^j t\>^oMMX'Sii>. Zcr,^. get#tiine 

t^-^oz^xT-M-T^Am^mmmtib. 199 s^fSM 

3 B J: 0 i,ik^(>i£^f\^t^mfc^tl. employeeJibonus. 
xml izn LTreadaHS^^Od t t^X't h . 

[0060] zcox 0 ^j:T9-txi^^^mff itim^. 
T9-^xWM<r>'<i^s.^}'f <—if^—f^<r>i/X'f-i^9u 

tf. '>x^M.'em^t^T9 ■tx..mm^'nd-*r--''^coi^x 

'TJ^9n y9z:im.l>Z^Lfzm-^. ^jcjfciireadfilllT&i 
^V»^Steinployee3&<readT#T L* 0 , readT^'-feJ^ 

9ny9^mo t{Rm.-t^t. mmT9-txm'sj(,z1ctt 
^^]ET9-txima-thZbi)n't^\\ tfz. V- 
^<<r>i^x7-M,9'o>y9 izM Lxii. OS u^jux'cr) r 9 

L, &±(r)T9-^Xt'e«IX'li. ^m^n'n^T9-bXiz 
o C -i-C O S KyWc7){R^(4i£>S^ ^ "> . 

[0061] iiiicjt ^ms&<r>mmz:^\si^f¥m 
T9-^x¥fsii,zm^^fzmmmx'ii . r -t xfpnr«o.-K u 
i^-ieiB{4, <X(7)Xdizmm^ti^, 

acl (user(lD) , role(eiiiployee) , doc (http: //announce/ 
bonus . xml ) . read) : - status (t i mestainp (S , T) ) , ver 1 f 
y#signature(S) . T >: "1999/06/03". 
Cixt^S^L, T9-*zXmmi^Xf-^l 0 0{4. ^^i^jL 
-J\^z:t iz . JilTiO J: 0 iz^m^'ud . 

[0062] i-r. d^u i^-mm'Ei^ sL-ju i ot^tji^ 

X. m^yi^^j'^-smcT^mm^nd . zzx\ status(t 

\mestamp(SJ))l,zmLX<X<r>/U-Jl'mm^ilX\>^^ t 

status(tiiBestainp(S,T)) :- tiinestainp(S,T) . 
status(timestamp(S,T)) :- get#tiiiiestaiiip(S,T) , make 
log(timestamp(S,T)). 

ti mestamp {SJ) 9 ^ J^X9 VTir— 9\i^ ^ fz 'J 
V—X\i^ jlJ< y h 4 Oizm^}l:ttlX^-^^\^<7)X\ st 
atus<7)Slc7)yP-7K4^fJrr'l.. ^LT, m2cr,;\^-fl' 
^^®ffl$fL, get#timestamp(S,T) , makelog(ti mestamp 
{S.l))i!}<^f^b^^^n'n^T9-bXpf^t^j::^. veri 
fy#signature(S)i:T >; " 1999/06/03" J4, ^KUi^-fffffi 
^->'i-;H OT'tii^fffliT'^^V^co-c. |Hl;^{cLT^f^ 
n^T9-^XW^ttch. get#t i mestamp (S, . 

T), makelog(timestamp(S,T)) ^ verify#signature 
(S), atn- >: "1999/06/03"*-'^|-ge^frl 1 3i:^^ 
X. -tfij iPW^i/i-yP 1 0 ij^tymim^^^^i^ 

[006 3] mz:mim&tm.^'j^-fi'2o\.zii\.\ 
T, %m\-^^^immtfziimMX't hWii'^'J ^- 
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-yU20(i. mi 4l,z^-tJ:o'^'r—yjl'i^r>X^^i> 
i,<7)fi't. Ml 4lZ7rctr—yMi^ Condition Expr 
ession-C^Jl $ ilfc rtS $r # 5 J. — ;W 3 

0(r>^M, S.t/i!aaT'#i.tllff^:i^'a.— ;U3 Oc7)Coinpon 
enti&i:mmLfzi>cr>X'$>h, mi 4<^7'-r;U3tiV^ 
T, makelog/lti. lB\^(7)mkelo^^t:W^-t^ . fo 
rniula#expression t li. BP.IJ?1IS:^ t'^^ts^m^ 

4. ^ZX\ ^iftitg«?aE^>''jL-;U2 03&»<i>afi=^>'' 
J.— /l^3 0-^, [tiinestarap#processor,get#tiinestaiiip 
(S.T)] , (log#processor,makelog(tiinestamp(S,T))] , 
(siganture#processor, verify#signature(S)), St/ 
(formuIa#processor,T >; "1999/06/03")) A«tftffft^ 1 
2 1 i: LTii^>n^o 

[00 64] i^C, itltT^i^'A-/P3 0tCfcV^-C., =&H 

4ffis^i 2 itcfst/cMa^r^To. WT. m^nzmm-r 

get#ti mestamp (S , T) liZitth ^SM 

get#tiiiiestaiap{i, M.X:^yT ■ ra-t -yVliZX *) 

9mi:no. M.X9yy- ■ T^-ki y^lzli. <^<7)^ 

0 ^DlffMar n ^5 A*<ie^$ ixT ^ ■» -l) . get#ti mest 
amp(S,T) :- get#trust(ti mestamp. C). get#timestamp 
(.C.T,S).ZZX\ get#trust/2t4, f-i'y T Jl-2 1 
0*»ii,trustOiEa$r]R0ai-r^-C*^, mtli7t<7> 

J: 5 ^trustiea^ij).?. s . 

trust (ti mestamp, "http://www, surety. com") . 
•ItHi^ iJtB/fJ^'ti mestamp i: LX" surety" ^iEM't^^ 
fcSrSift-ri). X— ^'7T'f/U2 1 0*»/^>:S»14 1^ 
^LfciS^i: LT. get#trust<7)^itC{C{i:. "http:/ 
/www.surety.com"*«SiJO^T^)fLi.. ZCOlk. get#time 
stampj^tCj: 0. Surety Ti mestamp Service*^ <^B#^J 
T<7):?>f A>^:?i^rSA^^|^>^^.S. ZtlX\ glfi^ti^l 

Timestamp ServiceliSuretyl,ZM^-ti>Z tiMML^ 
V ^ . 7C<0:S:»A^(iffl-ri) b'<r> J: d 1';:^ t le^^tg 

[0065] makelog(timestamp(S.T))C^rtfl)350;g 
makelogti. a;?' ■ ro-fe -yift J: 03iftS$rff a . OiT 

• ro-t-y-9-{4. JaTO J: -p ^Oi?'0§ji;^tO;t:i6i7)r 
:7-tXg5Kl 3 0 2:^tT-r^. 

acKsysl. role(system). doc (http: //announce/bonus. 
xmi#log), write) 

^vx. wmyfiv z^-mm^mm-ri>ztiz2:^xxi^ 

1 0 0*<n;r(c»i=ji;^^S:tf ^ffiRBr}#o:^. m^T^: 
i^'i-A-S OtC^^LT, '•t^'Ji^-iffffi^:>''i-./H 0*> 
<?>r^'-tX|tor**^$*lS. CltLCiO, makelQgJilog 
(ti mestamp (si gnature#value, 1999/06/04) )<7)S^ J^X 



[0066] verify#signature(S)iCtif-t^35!!:a 
verify#signature{4, W^yu-t •y^izX09!!Mt:'fT 

■t, Suretyc7)W:Sffl{4Valid/i'i:i5^-ri>. 
[ 0 0 6 7 ] T >: "1999/06/03" tCitrS^ia 

^mMi. m^Tu-{:.'y^\,zx^^mi'^o . t{4^^ 

mi. T >; "1999/06/03"^:cO-C'3!!ia^Mi: LTE (lEL 

[0068] UUitc J: 0 . afi=^fig1^iE^:S^'^-;U2 0 
*»^>Hfi=^:>''ji.— /U3 0<^M^>il/c, get#timestaiiip(S. 
T), iBakeiog(tiiiiestamp(S,T)) . verify#signature(S), 
>: "1999/06/03"<^#fl^TfiS^l 2 l{4^-CKi:=ar 
Zix\,zi:^. ^me<jtc^US/-iPfffi^:i^'j.-;H 0 
{Ct>V>'r^^$iX:''v:, acKuserdD), role(employee), 
doc (http: //announce/bonus, xml ) , read)^^^^}^^^ 

[ 0 0 6 9 ] ^ ^-C\ mmzm^R Lfz^^^T7-^X 

v^^<^wmifim^^ixx\.^h^ t i:mm-^ , ±ieto^j 
X'T^^-fzxim^^titi^. jt<7):ScM(r)uy^mz\t 
iS^-r9^M.x9yr<r>mi)^m\i^ixx\<^h. 9-{m,x9 
yy'<7imimmcr>v^mf,z^^ixfz^ t ^s*-r-S3&>\ 
^<r)^-ij^x:$'yyc^mti^u:^m.mz$)tt\'^ozb 

{4. ^^j>.x^yy^mJ: 0 i>m^mii'^-mx'h^ 
i^t3 y^<7)mi^LX\i'>fztLXi>. ^^Ax^yy 
[0070] 

[^BjcT)^^] l;XtWimLtzJ:o(,z. :^%mzj:tili. 
[@ilD^fS!#^i£Ba] 

[132] i?mmmwizii\^hr^^xm'm'^x^K 

[03] T^-^xmm->X7-A<7)^^i^^~JHzX^ 
[04] T'P-^XUW^X'rM.tliT-!'-^x^^9m 
[US] d?«Ji^-Sfli^i/jt-;H OtriS.-KUi/'- 
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[09] il^^filtg^iE^i/A-;^2 03&^ffl^,^Sx-:? 

[011] wn'ti^':>.-ju3.oi,zj::i>mn^mt:mm 



[012] T—?^<7^:^'^\^—i^3yi,zmLXV3yy 

r ^ }i'^m^'^^^:'nommf.zti\\x . :Jt#tcri? 

[013] 01 2<7)feietCJC tTr^CStcajJ^TS^'iSJaS 

[014] mimmmt^'Js>.-)V2 o *i^^T^:i''A 

■thmx'hh. 

1 0-- v'-|fflli^>''jL-/P. 2 0 --afi=«ifig«JiiE^ 
3 0 - ^Jl^T^i^'i— 4 0 — UV— XK^ 
o.j'O'h. 1 0 0-"r^-fe;^$iJfflIi^X7^A, 200--f 
2 1 0-x—:5^ 7 r-f;U. 2 2 0 --7' 
2 3 0 --JL— (f^-y-rS^XT^ 



[01] 



500 



230 



r 



220 



"N-240 



300' 




210 



200 



-400 



[0101 



tm 2] 



XML^ 





1 



30 



1 



32 



'130 



ifc 1res^a~JP ^3 3 



'133 



XML» 



XSUC<fc«Einfbrcaimnt£iSa)04 



<ul:capy> 

<xtl:upl]rtcvlitM itltet-'t||«|caMiitO|piO ttntO"/> 

</ul:caps> ^ 

Oof dlsclesadtffQSubiKt;^ 

Parti HiV :CR Held 

Quaatltf :<Ml:vAlue-«f SBlect«'(tantity'/> 
Otlaverlf DM:<ul:vali]«-of ulKtsDtl ivirl|Qatt*/> 

</ul:far-Md)> 
<Aiiff> 

</ui:tevlitfl> 
</xtl:st]riesheet> 
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110 



11U 
10 



M12 



113 



100 



140-^ 



130 



20 



40^^ 



^121 



J t 

133 ^134 



120 



131 



9V-X 



"7" K 
132 



[03] 



DctaTyp* 


Cwiipoi lei 1 la 


Aooest Request 


(SUtUeet Otteet Role <er UidX Operation) 


Extemel Concfidon 


|Ctfidtiorf-4Jst] 


Enferaenient Instruction 


Dristniction-Set} 


Resource Retrieval 


XMLOocument 


Polcy Retrieval 


XML Doctnient (rule syntax) 


Reeouro* Update 


XML Document 


Aeeais Deny 


a string of 'denied' 


Resource Truiaoode 


KTMU XML, string etc 



[[114] 



CnriitiOB Enressioi 


Cuibility 


.OHDOOCSt NtM 


nkelos/l 


0 


loi_procusor 


sa t_tiBest8sn/2 


0 


t iaettsao^rocessor 


verify.stvature/l 


0 


s lAiatursjirocestor 


fomi ^expression 


0 


forBilt_procssiar 



[04] 



C 



0- 



X 



3 



3KU£/-fii8l40*8Mir 



'401 



404 




406- 



«ifTaifl&tts%i?3.-^i'2 



405 



408 
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[116] 



fir's. 



501 



^502 



'503 



'504 



505 



506 


"'in 




508 































CEED (^^g) 



if. 



Street tfOMf^AL-C 



OtsMt htW/«Mrurf4W/fenii/expen*(ixiiri 



• PRile«fCj:«T>bA«]|ta>««g|: 
query(iiMi<rewnT«iih/IBMAlapMi3U 



• AM: 

Ota«et: httic//«Mktrteoni//fan»/npOTMJart 
Op«nftiorr mdOrtml) 
Cmdban: trwnoodsCiv ouO 

•dCfoto Cu ii i<u»iiii I>iag//«Anifttttcow//farni/ ii i p «ni ujurf . 
~ MnModaOlhenTwvluanlFemMO. 



imi] 



[1291 



• Am: 



• Jlltfl: 



CwflbiRy Ropcnitory 



Oontfon C i >U ii«i. .m URUtt^^ea«f-«. 



It ArpMM 
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[US] 



[011] 



801 



•802 




1101 



-1102 




AS 



1105 



1106 
1107 




1108 



c 





















1 y 




C 



»7 



1109 



[HIS] 



<Ordertlst> 
<Order> 

<Pa r tsNue>5p i nd 1 e ltotor</Pt r ttNMe> 

<Pt r tsNo>n 34</Pt r tsMo> 

<ProductType>Vicro Drive 0-typB</ProdictTypt> 

<au«nt I ty>20OC/Quint I ty> 

<0e I i ver I yOate>1 899/0S/?1</De I i Yir I fDai«> 

</Qrdar> 

C/Order> 
</0rderUsO 



<OrderLUt> 
<0rd8r> 

<PirtiHu>i>Spindl« llotor</PartiMu0> 

<PirtsRa>ll34</Ptrtstto> 

<ProductType>Uicro Drive 0-type</ProductTypa> 

<QMnt i ly>200C/Qun k i t7> 

<DbI I ver lyflite>1999/08/21</Del I virl yOite> 

</0r6»r> 



</Qrd«r> 
</Qr4erLlst> 

^OM disclaMdt(F*XTZ Corp. ">-| 
Parts Ibse zGi Head 
Quantity :200 
Dtlcvsrty Dui: 1 999/06/21 
Parts Raae :G8 Head 
Quantity :300 
Oalemly Oua: 1999/07/21 

<Ajot> 
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»^Jl|S;*:ft7tjTSISl623#t|fil4 B*r 
->f • t'- • xAl*^^tt 

W^jlim;M[miTSS^1623#«kl4 B^T 



F:?— 5B017 AAOl BA05 BA07 BB02 BBIO 
CA16 

5B082 Mil EAIO EAU EA12 GA14 
GC04 



